[REVISION HISTORY]

Cybersecurity incidents in Mérida

1 recorded revision of this situation.

What changed

2026-10-30 10:51 UTC → 2026-10-31 19:06 UTC · added ~~removed~~

In mid October 2026, officials in Mérida, Mexico, reported that the City Council was facing daily cyberattack attempts. These threats included identity theft, credential theft, and impersonation. To counter these risks, the municipality implemented 24/7 monitoring, mandatory password changes, and two-factor authentication. The city also joined the Alianza México Ciberseguro to bolster its digital infrastructure. By late October 2026, a separate incident involving a cyberattack on the Extremadura Health Service (SES) led to a judicial investigation in Mérida, Spain. The breach compromised over 334,000 health records, affecting 18,416 patients. National Police detained a suspect in Mérida who allegedly used an automated process via an anonymous virtual server to access the CSOnline portal. Authorities seized high-performance computer systems during a raid, and investigators believe the suspect intended to sell the stolen medical data on cybercrime forums. On October 29, 2026, details emerged regarding the scope of the Spanish breach. The exposed data included diagnoses, treatments, and medical histories, affecting high profile individuals such as María Guardiola, the President of the Junta de Extremadura. The investigation, led by the Court of Instance and Instruction of Mérida, is examining charges related to the discovery and revelation of secrets, as well as unlawful access to computer systems. Authorities confirmed that the seizure of stolen databases during a judicial search prevented the intended sale of the information.

Versions

Select a version to see what changed compared to the one before it.